Lucene search
+L

257 matches found

Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•9 views

CVE-2024-25210

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/deleteexpense.php...

9.9AI score0.00814EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/16 6:15 p.m.•32 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.2CVSS7.4AI score0.00626EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/16 6:15 p.m.•17 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.2CVSS5.8AI score0.00626EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/16 6:15 p.m.•21 views

Sql injection

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

5.8CVSS8.4AI score0.00626EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/01/16 12:00 a.m.•250 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection through the admin reports endpoint: /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end=. The vulnerability affects the endpoint handling date_start/date_end parameters without proper validation, enabling ...

7.2CVSS7.4AI score0.00626EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/16 12:00 a.m.•7 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.4AI score0.00626EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•4 views

CVE-2024-22628: Improper Neutralization of Special Elements used in an SQL Command

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.2CVSS7.2AI score0.00626EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/16 12:00 a.m.•39 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.7AI score0.00626EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•13 views

Sourcecodester Budget And Expense Tracker System Security Vulnerability

Sourcecodester Budget And Expense Tracker System is a web-based application by Carlo Montero Personal Developer. It is used to manage your personal/small business budget and expenses. A security vulnerability exists in Sourcecodester Budget And Expense Tracker System v1.0, which stems from the...

7.2CVSS7.8AI score0.00626EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/29 8:15 p.m.•36 views

CVE-2023-5286

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

5.4CVSS4.2AI score0.00497EPSS
SaveExploits0References3
OSV
OSV
•added 2023/09/29 8:15 p.m.•15 views

CVE-2023-5286

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

5.4CVSS3.9AI score0.00497EPSS
SaveExploits0References3
Prion
Prion
•added 2023/09/29 8:15 p.m.•31 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

4CVSS5.2AI score0.00497EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2023/09/29 8:00 p.m.•71 views

CVE-2023-5286

The CVE-2023-5286 entry affects SourceCodester Expense Tracker App v1, specifically the Category Handler’s add_category.php where manipulating the category_name parameter causes cross-site scripting (XSS). Descriptions across multiple sources confirm remote exploitation potential and public discl...

5.4CVSS4.2AI score0.00497EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/29 8:00 p.m.•20 views

CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

4CVSS6.2AI score0.00497EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/09/29 8:00 p.m.•47 views

CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

4CVSS5.5AI score0.00497EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/09/29 12:00 a.m.•17 views

PT-2023-32007 · Sourcecodester · Sourcecodester Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Expense Tracker App version 1 Description: A problematic issue has been found in the file add category.php of the component Category Handler. The manipulation of the category name argument leads to cross site scripting. The...

5.4CVSS6.4AI score0.00497EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/29 12:00 a.m.•4 views

CVE-2023-5286: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

5.4CVSS3.7AI score0.00497EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/29 12:00 a.m.•13 views

Expense Tracker Cross-Site Scripting Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A cross-site scripting vulnerability exists in Expense Tracker v1. The vulnerability stems from the fact that incorrect manipulation of the parameter categoryname can lead to cross-site scripting...

5.4CVSS5.8AI score0.00497EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/27 8:15 p.m.•17 views

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

5.4CVSS5.8AI score0.00432EPSS
SaveExploits2References2
NVD
NVD
•added 2023/09/27 8:15 p.m.•29 views

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

5.4CVSS5.3AI score0.00432EPSS
SaveExploits2References2
Rows per page
Query Builder